CTF challenges & writeups

76 challenges in family ⊕ web:xss ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
frogshare #stored-xss #svg-xss	corCTF 2023	36.97	Web	files wu 1
blazingfast #web #xss #unicode-normalization	DiceCTF 2022	24.82	Web	files wu 2
no-cookies #web #sql-injection #xss #regexp-input-leak	DiceCTF 2022	24.82	Web	files wu 1
markdown-plus-plus #css-injection	HSCTF 2022	–	Web	files wu 1
bb #dom-clobbering	LINE 2022	–	Web	files wu 1
username_generator #javascript-scope-pollution #xss	SEETF 2022	–	Web	files wu 1
NarutoKeeper #xss #meta-redirect	Securinets 2022 Quals	50.11	Web	files wu 1
fleecebook #xss	TJCTF 2022	–	Web	files wu 1
jokster #xss	TJCTF 2022	–	Web	files wu 1
umassdining #dom-based-xss #csp-bypass #double-encoding	UMassCTF 2022	23.56	Web	files wu 2
Sigma #wasm-exploitation #buffer-overflow #xss	UTCTF 2022	–	Web	files wu 1
modernblog #dom-clobbering #css-leak	corCTF 2022	24.92	Web	files wu 2
archived #stored-xss	hxp 2022	–	Web	files wu 2
lovely_nonces #xss #csp-nonce-bypass	ASIS 2021 Quals	89.22	Web	files wu 2
Stylish #css-injection	BCACTF 2021	–	Web	files wu 1
BabierCSP #web #csp-bypass #xss #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
WebUtils #web #xss #nodejs #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
Notepad #dompurify-bypass	DownUnderCTF 2021	–	Web	files wu 2
xss_it #ejs-ssti #xss #xs-leak	RCTF 2021	–	Web	files wu 1
giita #prototype-pollution #xss	TSG 2021	–	Web	files wu 1
Flags #html-injection #css-injection #csp-bypass #data-exfiltration	Zh3r0 2021	–	Web	files wu 1
blogme #csp-bypass #dom-clobbering #service-worker	corCTF 2021	24.92	Web	files wu 1
styleme #xs-leak #prototype-pollution #css-injection	corCTF 2021	24.92	Web	files wu 1
simple_blog #xss #csp-bypass #trusted-types	zer0pts 2021	24.56	Web	files wu 3
DNXSS_over_HTTPS #dns-txt-record-xss	KalmarCTF 2025	33.89	Web	files wu 1
Bubble_Tea_Diaries #stored-xss #bbcode-parser #html-escape-bypass #jwt	SAS 2025 Quals	20.72	Web	files wu 1
Conspiracy_Social #web #xss #websocket #admin-bot-token-theft #csp-bypass	CyberSecurityRumble 2024 Quals	100.00	Web	files wu 1
learn_HTTP #xss #admin-bot #jwt-secret-cracking	Pearl 2024	23.95	Web	files wu 1
Modern_Sicilian_Network #xss #cross-subdomain	TeamItaly 2023	24.88	Web	files wu 2
Super_Admin_Panel #xss #csrf	TeamItaly 2023	24.88	Web	files wu 1
CAFE #parser-differential #xss	Codegate 2022 Quals	–	Web	files wu 1
GoogleWayback #xss #csrf	WeCTF 2022	36.12	Misc	files wu 1
jupyter #stored-xss #jupyter-notebook	BuckeyeCTF 2021	24.81	Web	files wu 1
Shisui #dom-clobbering	FwordCTF 2021	24.42	Web	files wu 1
md-notes #postmessage-xss	InCTF 2021	70.41	Web	files wu 1
SecureStorage #xss #postmessage #iframe-injection	RaRCTF 2021	24.53	Web	files wu 1

Challenges